OCR issues guidance on HIPAA Security Rule compliance and mobile health apps Posted on March 6, 2016 The U.S. Department of Health and Human Services Office for Civil Rights (OCR) recently published two guidance documents to aid organizations in complying with HIPAA.